Martin Osvald

A flaw in the Open Management Application Programming Interface (OMAPI) port allows a remote attacker to cause a persistent denial of service (DoS). By sending a specially crafted lease creation request containing an excessively long InfiniBand MAC address, a buffer overflow is triggered in the `print hw addr()` function. This results in the `dhcpd` service crashing and failing to restart without manual intervention. The risk is higher if the port is not secured with Transaction Signature (TSIG) key authentication.

The issue is related to a stack-based buffer overflow in the `parseLegacySyslogMsg` function in `tools/syslogd.c` in `rsyslogd`. This might allow remote attackers to cause a denial of service (application exit) via a long `TAG` in a legacy syslog message. The vulnerability can be exploited remotely and may lead to disruption of protected information availability.

The issue allows local users to have an unspecified impact by leveraging world-writable permissions for files and directories due to an incorrect umask value.